PROJECT TITLE:

Dancing with Giants: Wimpy Kernels for On-Demand I/O Isolation

ABSTRACT:

To be trustworthy, security-sensitive applications must be small and easy--or wimpy. Because of their limited size and functions, they have to securely compose with large, untrusted commodity systems--or giants--to survive. A security design based mostly on a wimpy kernel can provide on-demand isolated I/O channels for wimp applications while not bloating the underlying trusted computing base.